We've made major changes to the entire firewall architecture to dramatically reduce rule creation and/or modification. In addition to supporting creating and managing network objects through the firewall components, we've also added the capability to filter traffic by geographic location (GeoIP) which enables users to easily allow or block traffic from various countries. We also support time-based rules to allow for easy firewall rulesets based on business hours or other defined time structures.